Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: autochat Clear all filters
TI-2025-11042 CVE-2025-12043 · GHSA-9qcp-28j5-h8j6

Autochat Automatic Conversation <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update

Priority LOW 30

The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint in all versions up to, an…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00292 Published 2025-11-25 No fix listed CWE-862
TI-2023-02848 CVE-2023-3041 · GHSA-xh7h-8gq3-h9qj

Autochat <= 1.1.7- Unauthenticated Stored XSS

Priority MEDIUM 60

The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-07-17 No fix listed